$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa File: c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa (raw, json) Hash identifier: f5Qmgf/W/1oWmCBxIr8Q3/Rao+b2UvpI/y26rpJyBo4= Subject key identifier: E6:B6:C2:81:6B:A2:77:5D:87:41:81:8F:60:78:AE:17:85:AF:F2:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9B538E37FD9E0EEDEC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396566 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9b:53:8e:37:fd:9e:0e:ed:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=c3239f9b-7190-4caf-8690-b294ac01d693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:02:4e:52:73:0e:96:32:59:9c:30:bc:8c: 72:3c:5c:2c:85:b4:ee:57:79:a5:25:ea:55:23:56: 3e:c7:2c:a2:41:09:a5:b1:56:6e:64:91:7a:8d:d5: 09:c8:33:87:15:79:69:05:6b:3f:fe:8e:55:b3:18: d3:7a:54:b2:54:d2:e8:2b:04:17:9f:94:18:6b:58: 5a:ea:1a:26:41:c1:57:4a:0f:b3:70:ce:d1:ec:51: fb:8c:b6:57:46:e1:7c:ff:df:0f:68:dc:0c:af:58: b4:06:de:41:56:c2:f4:ce:eb:72:29:37:b2:0c:d9: 9b:26:2e:51:ba:f8:df:fd:02:d3:e0:49:c5:76:96: e1:9e:5f:b3:58:ce:63:9f:bb:84:86:3a:81:13:75: 2e:a3:a1:06:bf:fd:6c:e7:da:63:f8:c5:01:3c:6b: 6f:e9:bb:47:07:4d:2b:c7:0e:b8:0c:d0:99:cc:06: 1a:db:2e:19:7c:b9:9f:53:12:83:ed:a8:86:ee:14: 00:b1:03:92:40:f8:22:81:7b:9b:8e:db:cc:a9:dc: 18:8e:e9:dc:41:6c:1e:6f:1d:00:cf:6e:92:54:e3: 76:22:2d:f4:c1:5f:19:82:42:16:9e:04:d9:c9:a9: 31:a7:e6:e7:c4:12:55:70:b2:c5:3f:5a:2a:f0:f7: 05:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B6:C2:81:6B:A2:77:5D:87:41:81:8F:60:78:AE:17:85:AF:F2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:54:bd:44:ae:5e:f3:b8:01:4c:8c:37:dd:a0:09:22:da:38: c1:dc:6d:9b:20:d4:b6:8d:d6:1c:38:12:42:05:51:f3:78:2e: 91:36:a7:91:48:6c:f0:b5:f6:24:5b:4c:44:4f:21:3d:07:f5: 25:1f:0b:88:df:06:d7:cc:4e:4c:70:bf:3e:10:95:df:34:5f: 46:dd:7d:62:c0:e3:30:1e:4c:a2:c0:ff:fb:91:8e:90:a3:db: b8:d5:2e:06:ea:6c:fb:0b:c8:c7:6b:a5:fc:cb:d5:cf:47:e5: 43:97:40:53:97:98:28:d8:52:17:94:44:3d:1d:f6:a3:56:49: 96:1f:85:63:e6:8b:c7:78:16:19:48:5b:98:20:81:6c:73:c5: 4d:d0:ac:4f:9d:c2:57:d3:8a:5a:50:d5:3a:84:75:f5:cb:fa: 39:72:52:60:03:b4:f6:30:a0:e2:64:c5:76:01:a2:f3:94:71: 1c:18:71:eb:45:54:84:19:2a:ce:91:3c:67:de:79:1d:ec:82: 08:fa:c2:81:33:29:1e:83:62:f3:2d:09:ac:3c:92:4a:3a:7d: c5:02:47:67:5d:02:ac:4b:64:45:b1:54:b6:5a:03:2f:38:0f: 11:cf:8f:5c:f9:b5:ff:f5:53:ef:6c:14:28:f1:29:1a:00:a7: 5e:6f:97:9d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4eptTjjf9ng7t7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YzMyMzlmOWItNzE5MC00Y2FmLTg2OTAtYjI5NGFjMDFkNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly4CTlJzDpYyWZwwvIxyPFwshbTuV3mlJepV I1Y+xyyiQQmlsVZuZJF6jdUJyDOHFXlpBWs//o5VsxjTelSyVNLoKwQXn5QYa1ha 6homQcFXSg+zcM7R7FH7jLZXRuF8/98PaNwMr1i0Bt5BVsL0zutyKTeyDNmbJi5R uvjf/QLT4EnFdpbhnl+zWM5jn7uEhjqBE3Uuo6EGv/1s59pj+MUBPGtv6btHB00r xw64DNCZzAYa2y4ZfLmfUxKD7aiG7hQAsQOSQPgigXubjtvMqdwYjuncQWwebx0A z26SVON2Ii30wV8ZgkIWngTZyakxp+bnxBJVcLLFP1oq8PcFsQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOa2woFronddh0GBj2B4rheFr/JCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhhMzU3MWEtMmFkYS0z ZDFiLTk5NDMtMjM1NWUyZjgyZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBfVL1Erl7zuAFMjDfdoAki2jjB3G2bINS2jdYc OBJCBVHzeC6RNqeRSGzwtfYkW0xETyE9B/UlHwuI3wbXzE5McL8+EJXfNF9G3X1i wOMwHkyiwP/7kY6Qo9u41S4G6mz7C8jHa6X8y9XPR+VDl0BTl5go2FIXlEQ9Hfaj VkmWH4Vj5ovHeBYZSFuYIIFsc8VN0KxPncJX04paUNU6hHX1y/o5clJgA7T2MKDi ZMV2AaLzlHEcGHHrRVSEGSrOkTxn3nkd7III+sKBMykeg2LzLQmsPJJKOn3FAkdn XQKsS2RFsVS2WgMvOA8Rz49c+bX/9VPvbBQo8SkaAKdeb5ed -----END CERTIFICATE-----Generated at Fri Jun 6 19:25:06 2025 by rpki-client